fix use of valid_params in PostsController